$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: VTAV+Fi99+l8OyRJXW/j78Hm8jW9QNCyOrVQlJWw5TI= Subject key identifier: 8E:7C:B8:12:5F:D7:5A:41:E2:6F:17:65:79:A3:B3:2D:7C:A8:84:25 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 0DE7DB9C04E4EE7D322B4BBCBF3ED94C04DB72D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: 012A Signing time: Sat 07 Mar 2026 07:02:09 +0000 Manifest this update: Sat 07 Mar 2026 06:57:09 +0000 Manifest next update: Tue 10 Mar 2026 11:40:09 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 2: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: N3bMRe+scKEjb42E9tlm510WfvZjwwNKabIBEQFY7HU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e7:db:9c:04:e4:ee:7d:32:2b:4b:bc:bf:3e:d9:4c:04:db:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Mar 7 06:57:09 2026 GMT Not After : Mar 10 11:40:09 2026 GMT Subject: CN=8E7CB8125FD75A41E26F176579A3B32D7CA88425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:75:27:b2:aa:ea:38:1f:3d:d1:6d:ca:4f: b0:b1:e5:5f:9a:f0:bb:9c:6e:3d:60:fa:f5:9a:8c: cc:92:39:42:f0:2e:9f:34:9a:c4:72:11:21:cc:f9: 76:61:a9:b5:ed:1d:1d:23:f7:47:61:b7:6d:74:54: 3f:7a:2a:87:f3:4d:5b:25:9d:f1:c8:7b:e3:11:fb: 13:05:f5:10:8b:37:05:32:fa:96:ba:bc:42:70:2d: f9:f1:63:f5:a9:d0:bf:2b:f9:40:9e:cd:ea:cd:f6: 0e:c6:90:b7:74:92:88:df:d5:e3:f5:2b:71:84:cc: 7f:b6:c2:3f:d9:71:04:f5:f9:b2:d2:a3:88:b0:0b: f6:3e:7c:b5:91:93:52:99:11:66:7b:a8:fd:a0:02: ba:26:1f:93:59:da:19:54:00:fd:93:1d:5d:89:b8: fb:c1:ac:2a:a1:98:aa:cb:79:10:db:ad:de:8d:22: 7d:78:23:eb:0f:e7:5d:9d:df:19:c6:ce:9b:68:c2: 30:48:0e:33:e5:7e:8b:85:33:d9:85:cf:bc:69:d6: e0:a8:4f:e1:26:e7:4a:13:e7:b0:09:2b:76:c5:fc: d4:5c:67:68:ae:b9:3f:ff:4a:46:04:18:63:9f:95: 4e:9d:25:04:7a:14:65:4b:8b:fd:07:a6:d9:e7:88: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:B8:12:5F:D7:5A:41:E2:6F:17:65:79:A3:B3:2D:7C:A8:84:25 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:a7:2a:a2:60:4a:d8:12:a9:dc:c4:08:f0:37:9e:bc:d6:64: b8:3d:c4:b1:09:58:18:59:0e:04:e8:91:50:47:c3:6e:14:11: 0b:1a:b6:ef:e8:3a:3e:c6:f0:18:0f:2d:af:ff:9d:37:06:d8: 0e:b9:4e:0f:d9:81:44:53:e7:a4:cd:70:bb:7f:7f:6d:b8:8c: 75:45:46:d5:b4:36:15:05:71:77:85:2b:78:e8:63:a6:4f:03: 87:20:26:40:c3:f9:5a:df:2c:a0:f8:de:ab:9a:da:d4:0e:17: f5:b8:e0:db:fa:19:6c:27:84:7e:e4:b3:76:5b:0a:71:0c:38: ee:7a:5d:f3:9d:82:04:74:b4:c6:31:e5:39:10:fb:10:fb:b9: 89:c1:f1:1d:6a:28:e9:23:38:bc:f0:66:9c:fc:00:8e:ab:44: 8a:47:ff:78:77:42:94:32:8e:98:d7:f6:83:97:11:66:ef:43: 49:0d:83:bf:ec:59:98:08:df:13:80:70:e2:a3:9d:43:49:1e: 86:86:ab:cf:c5:84:e0:3b:73:ee:6c:6d:c8:35:43:8f:ac:b0: 0f:0a:78:04:35:4b:5d:4e:33:94:bf:92:bf:af:71:51:2e:6d: 8f:38:92:8a:28:27:b9:e9:87:23:b4:43:43:0b:9c:a3:74:9d: e3:bc:83:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDefbnATk7n0yK0u8vz7ZTATbctIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNjAzMDcwNjU3MDlaFw0yNjAzMTAxMTQwMDlaMDMxMTAvBgNV BAMTKDhFN0NCODEyNUZENzVBNDFFMjZGMTc2NTc5QTNCMzJEN0NBODg0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBHUnsqrqOB890W3KT7Cx5V+a 8Lucbj1g+vWajMySOULwLp80msRyESHM+XZhqbXtHR0j90dht210VD96KofzTVsl nfHIe+MR+xMF9RCLNwUy+pa6vEJwLfnxY/Wp0L8r+UCezerN9g7GkLd0kojf1eP1 K3GEzH+2wj/ZcQT1+bLSo4iwC/Y+fLWRk1KZEWZ7qP2gAromH5NZ2hlUAP2THV2J uPvBrCqhmKrLeRDbrd6NIn14I+sP512d3xnGzptowjBIDjPlfouFM9mFz7xp1uCo T+Em50oT57AJK3bF/NRcZ2iuuT//SkYEGGOflU6dJQR6FGVLi/0HptnniAP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjny4El/XWkHibxdleaOzLXyohCUwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOKnKqJgStgSqdzECPA3nrzWZLg9xLEJWBhZ DgTokVBHw24UEQsatu/oOj7G8BgPLa//nTcG2A65Tg/ZgURT56TNcLt/f224jHVF RtW0NhUFcXeFK3joY6ZPA4cgJkDD+VrfLKD43qua2tQOF/W44Nv6GWwnhH7ks3Zb CnEMOO56XfOdggR0tMYx5TkQ+xD7uYnB8R1qKOkjOLzwZpz8AI6rRIpH/3h3QpQy jpjX9oOXEWbvQ0kNg7/sWZgI3xOAcOKjnUNJHoaGq8/FhOA7c+5sbcg1Q4+ssA8K eAQ1S11OM5S/kr+vcVEubY84koooJ7nphyO0Q0MLnKN0neO8g4I= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:21 2026 by rpki-client